Aix
by IBM
CVEs (409)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2006-0667 | 0.00 | — | 0.00 | Mar 10, 2006 | lscfg in IBM AIX 5.2 and 5.3 allows local users to modify arbitrary files via a symlink attack. | |||
| CVE-2006-0666 | 0.00 | — | 0.00 | Feb 15, 2006 | Unspecified vulnerability in the (1) unix_mp and (2) unix_64 kernels in IBM AIX 5.3 VRMF 5.3.0.30 through 5.3.0.33 allows local users to cause a denial of service (system crash) via unknown vectors related to EMULATE_VMX. | |||
| CVE-2006-0674 | 0.00 | — | 0.00 | Feb 13, 2006 | Buffer overflow in the arp command of IBM AIX 5.3 L, 5.3, 5.2.2, 5.2 L, and 5.2 allows local users to cause a denial of service (crash) via a long iftype argument. | |||
| CVE-2005-4273 | 0.00 | — | 0.00 | Dec 15, 2005 | Multiple unspecified vulnerabilities in (1) getShell and (2) getCommand in IBM AIX 5.3 allow local users to append to arbitrary files. | |||
| CVE-2005-4271 | 0.00 | — | 0.00 | Dec 15, 2005 | Buffer overflow in the malloc debug system in IBM AIX 5.3 allows local users to execute arbitrary code. | |||
| CVE-2005-4068 | 0.00 | — | 0.00 | Dec 8, 2005 | Unspecified "absolute path vulnerability" in umountall in IBM AIX 5.1 through 5.3 allows local users to cause unknown impact via unknown vectors. | |||
| CVE-2005-3749 | 0.00 | — | 0.00 | Nov 22, 2005 | Unspecified "absolute path vulnerabilities" in the diagela command (diagela.sh) in IBM AIX 5.2 and 5.3 have unknown impact and attack vectors. | |||
| CVE-2005-3504 | 0.00 | — | 0.03 | Nov 5, 2005 | Buffer overflow in swcons in IBM AIX 5.2, when debug malloc is enabled, allows remote attackers to cause a core dump and possibly execute arbitrary code. | |||
| CVE-2005-3396 | 0.00 | — | 0.03 | Nov 1, 2005 | Buffer overflow in the chcons (chcon) command in IBM AIX 5.2 and 5.3, when DEBUG MALLOC is enabled, might allow attackers to execute arbitrary code via a long command line argument. | |||
| CVE-2005-3289 | 0.00 | — | 0.00 | Oct 23, 2005 | LSCFG in IBM AIX 5.2 and 5.3 does not create temporary files securely, which allows local users to corrupt /etc/passwd and possibly other system files via the trace file. | |||
| CVE-2005-3060 | 0.00 | — | 0.01 | Sep 30, 2005 | Buffer overflow in getconf in IBM AIX 5.2 to 5.3 allows local users to execute arbitrary code via unknown vectors. | |||
| CVE-2005-2238 | 0.00 | — | 0.01 | Jul 12, 2005 | ftpd in IBM AIX 5.1, 5.2 and 5.3 allows remote authenticated users to cause a denial of service (port exhaustion and memory consumption) by using all ephemeral ports. | |||
| CVE-2005-2237 | 0.00 | — | 0.00 | Jul 12, 2005 | Format string vulnerability in the swcons command in IBM AIX 5.3, and possibly other versions, might allow local users to execute arbitrary code via long command line arguments. | |||
| CVE-2005-2235 | 0.00 | — | 0.01 | Jul 12, 2005 | Buffer overflow in the diagTasksWebSM command in IBM AIX 5.1, 5.2 and 5.3, might allow local users to execute arbitrary code via long command line arguments. | |||
| CVE-2005-2233 | 0.00 | — | 0.00 | Jul 12, 2005 | Buffer overflow in multiple "p" commands in IBM AIX 5.1, 5.2 and 5.3 might allow local users to execute arbitrary code via long command line arguments to (1) penable or other hard-linked files including (2) pdisable, (3) pstart, (4) phold, (5) pdelay, or (6) pshare. | |||
| CVE-2005-2234 | 0.00 | — | 0.01 | Jul 12, 2005 | Buffer overflow in the getlvname command in IBM AIX 5.1, 5.2 and 5.3, might allow local users to execute arbitrary code via long command line arguments. | |||
| CVE-2005-0240 | 0.00 | — | 0.00 | May 2, 2005 | Format string vulnerability in chdev on IBM AIX 5.2 allows local users to execute arbitrary code via format string specifiers in a command line argument, which is not properly handled when printing an error message. | |||
| CVE-2005-0250 | 0.00 | — | 0.01 | May 2, 2005 | Format string vulnerability in auditselect on IBM AIX 5.1, 5.2, and 5.3 allows local users to execute arbitrary code via format string specifiers in a command line argument. | |||
| CVE-2005-1176 | 0.00 | — | 0.00 | May 2, 2005 | Race condition in JFS2 on AIX 5.2 and 5.3, when deleting a file while I/O is still occurring for that file, may write data to a different file, which could leak sensitive information. | |||
| CVE-2005-1037 | 0.00 | — | 0.02 | May 2, 2005 | Unknown vulnerability in AIX 5.3.0, when configured as an NIS client, allows remote attackers to gain root privileges. |
- CVE-2006-0667Mar 10, 2006risk 0.00cvss —epss 0.00
lscfg in IBM AIX 5.2 and 5.3 allows local users to modify arbitrary files via a symlink attack.
- CVE-2006-0666Feb 15, 2006risk 0.00cvss —epss 0.00
Unspecified vulnerability in the (1) unix_mp and (2) unix_64 kernels in IBM AIX 5.3 VRMF 5.3.0.30 through 5.3.0.33 allows local users to cause a denial of service (system crash) via unknown vectors related to EMULATE_VMX.
- CVE-2006-0674Feb 13, 2006risk 0.00cvss —epss 0.00
Buffer overflow in the arp command of IBM AIX 5.3 L, 5.3, 5.2.2, 5.2 L, and 5.2 allows local users to cause a denial of service (crash) via a long iftype argument.
- CVE-2005-4273Dec 15, 2005risk 0.00cvss —epss 0.00
Multiple unspecified vulnerabilities in (1) getShell and (2) getCommand in IBM AIX 5.3 allow local users to append to arbitrary files.
- CVE-2005-4271Dec 15, 2005risk 0.00cvss —epss 0.00
Buffer overflow in the malloc debug system in IBM AIX 5.3 allows local users to execute arbitrary code.
- CVE-2005-4068Dec 8, 2005risk 0.00cvss —epss 0.00
Unspecified "absolute path vulnerability" in umountall in IBM AIX 5.1 through 5.3 allows local users to cause unknown impact via unknown vectors.
- CVE-2005-3749Nov 22, 2005risk 0.00cvss —epss 0.00
Unspecified "absolute path vulnerabilities" in the diagela command (diagela.sh) in IBM AIX 5.2 and 5.3 have unknown impact and attack vectors.
- CVE-2005-3504Nov 5, 2005risk 0.00cvss —epss 0.03
Buffer overflow in swcons in IBM AIX 5.2, when debug malloc is enabled, allows remote attackers to cause a core dump and possibly execute arbitrary code.
- CVE-2005-3396Nov 1, 2005risk 0.00cvss —epss 0.03
Buffer overflow in the chcons (chcon) command in IBM AIX 5.2 and 5.3, when DEBUG MALLOC is enabled, might allow attackers to execute arbitrary code via a long command line argument.
- CVE-2005-3289Oct 23, 2005risk 0.00cvss —epss 0.00
LSCFG in IBM AIX 5.2 and 5.3 does not create temporary files securely, which allows local users to corrupt /etc/passwd and possibly other system files via the trace file.
- CVE-2005-3060Sep 30, 2005risk 0.00cvss —epss 0.01
Buffer overflow in getconf in IBM AIX 5.2 to 5.3 allows local users to execute arbitrary code via unknown vectors.
- CVE-2005-2238Jul 12, 2005risk 0.00cvss —epss 0.01
ftpd in IBM AIX 5.1, 5.2 and 5.3 allows remote authenticated users to cause a denial of service (port exhaustion and memory consumption) by using all ephemeral ports.
- CVE-2005-2237Jul 12, 2005risk 0.00cvss —epss 0.00
Format string vulnerability in the swcons command in IBM AIX 5.3, and possibly other versions, might allow local users to execute arbitrary code via long command line arguments.
- CVE-2005-2235Jul 12, 2005risk 0.00cvss —epss 0.01
Buffer overflow in the diagTasksWebSM command in IBM AIX 5.1, 5.2 and 5.3, might allow local users to execute arbitrary code via long command line arguments.
- CVE-2005-2233Jul 12, 2005risk 0.00cvss —epss 0.00
Buffer overflow in multiple "p" commands in IBM AIX 5.1, 5.2 and 5.3 might allow local users to execute arbitrary code via long command line arguments to (1) penable or other hard-linked files including (2) pdisable, (3) pstart, (4) phold, (5) pdelay, or (6) pshare.
- CVE-2005-2234Jul 12, 2005risk 0.00cvss —epss 0.01
Buffer overflow in the getlvname command in IBM AIX 5.1, 5.2 and 5.3, might allow local users to execute arbitrary code via long command line arguments.
- CVE-2005-0240May 2, 2005risk 0.00cvss —epss 0.00
Format string vulnerability in chdev on IBM AIX 5.2 allows local users to execute arbitrary code via format string specifiers in a command line argument, which is not properly handled when printing an error message.
- CVE-2005-0250May 2, 2005risk 0.00cvss —epss 0.01
Format string vulnerability in auditselect on IBM AIX 5.1, 5.2, and 5.3 allows local users to execute arbitrary code via format string specifiers in a command line argument.
- CVE-2005-1176May 2, 2005risk 0.00cvss —epss 0.00
Race condition in JFS2 on AIX 5.2 and 5.3, when deleting a file while I/O is still occurring for that file, may write data to a different file, which could leak sensitive information.
- CVE-2005-1037May 2, 2005risk 0.00cvss —epss 0.02
Unknown vulnerability in AIX 5.3.0, when configured as an NIS client, allows remote attackers to gain root privileges.
Page 15 of 21